Facebook says Cambridge Analytica may have had data on 87 million people

Facebook said Wednesday that Cambridge Analytica, a data firm with ties to President Donald Trump’s campaign, may have had information on about 87 million Facebook users without the users’ knowledge.

Facebook had previously said the number of people whose information may have been shared with Cambridge Analytica was only around 50 million. It announced the revised number in a blog post on Wednesday.

Facebook has said the data was initially collected by a professor for academic purposes in line with its rules. The information was later transferred to third parties, including Cambridge Analytica, in violation of Facebook’s policies.

Starting next week, Facebook will tell people if their information was shared with Cambridge Analytica.

Facebook also said in the blog post Wednesday that “most people on Facebook” may have had their public profile information scraped by malicious actors. The people doing the scraping used account recovery and search tools that let users look people up by phone numbers and email addresses, then took information from profiles.

“Given the scale and sophistication of the activity we’ve seen, we believe most people on Facebook could have had their public profile scraped in this way,” said CTO Mike Schropfer in the post.

Facebook is turning off the search feature and changing how account recovery works. The post also outlines a number of other ways that Facebook is cracking down on third-party access to data.

The company is trying to limit what kind of information third-party apps will be able to collect. It will no longer allow apps to see personal information about users, like religion, political views, relationship status, education, work history, fitness activity and what books, movies and music people have consumed.

Apps will now need to get approval from Facebook before they can access things like Groups, Pages and check-ins. They can no longer see the names and profile photos of people posting and commenting in a group, or see the guest list for events.

Facebook will also delete call logs older than a year for Messenger and Facebook Lite users on Android who have opted-in to the call and text history feature. This feature became controversial last month after a number of users discovered years of their contacts and call history in their Facebook data.

On Monday, Facebook users will see an option on top of their News Feed to review which apps have access to their information.